Mission Assurance Ron Kolecki Senior Systems Assurance Manager August 16-17, 2005

1. Mission AssuranceRon KoleckiSenior Systems Assurance ManagerAugust 16-17, 2005

2. Mission Assurance Requirement Summary LRO Level 1 Requirements ESMD-RLEP-0010 RLEP Mission Assurance Requirements 430-RQMT-000006 Mission Assurance Guidelines 300-PG-7120.2.2 LRO Spacecraft PAIP LOLA Instrument PAIP LEND Instrument PAIP LROC Instrument PAIP LAMP Instrument PAIP CRaTER Instrument PAIP Diviner Instrument PAIP Mini RF Tech Demo DoD Responsible GSFC Responsible GSFC PI Russia Responsible UoMD PI MIT Responsible Boston U PI MSSS Responsible Northwestern Univ PI SwRI Responsible NW PI JPL Responsible UCLA PI GSFC Responsible Mission Assurance Requirements are consistent across project with independent oversight of each element

3. Systems Assurance Manager Ron Kolecki Safety Manager Dave Bogart EEE Parts Rich Williams Materials Pilar Joy Reliability NinoIngegne Lydia Lee Hardware QA Willie Jones Alton Lacks Software QA Cindy Taylor Manufacturing Nick Virmani Mission Assurance Organization Office of System Safety and Mission Assurance Director LRO Project Manager Craig Tooley LRO Experienced Personnel provide oversight and technical support across all elements of LRO Project

4. Quality System / Configuration Control System Safety Reliability/Risk Software Assurance Design Verification/ Technical Reviews Requirements Applicable to all Mission Concepts 300-PG-7120.2.2 (MAG) RLEP MAR 430-RQMT-000006 LRO Spacecraft/ Orbiter PAIP 431-PLAN-000131 LOLA PAIP LOLA-PLAN-0003 LEND PAIP LROC PAIP CRaTER PAIP DWG 32-01204 Diviner PAIP LAMP PAIP PAIP-05-15-11239 • QMS: ISO 9001:2000 • Nonconformance Control (NCR or PFR) • MRB/FRB Requirements • Hardware, S/W or Design Reuse • Configuration Mgt. • Reqts. Flowdown • Contractor Surveillance • Safety Program per NPD 8700.1 • System Safety Plan • Hazard Analyses • MSPSP • Ground & Hazardous Ops. • Orbital Debris • Launch Site Support • Mishap Reporting • Probabilistic Risk Assessment • FMEA / FTA • Part Stress & WCA • Trend Analysis • Limited Life • Risk List • Documented Program (PAIP) • Software Safety per NASA-STD-8719.13 • Verification & Validation, IV&V • Configuration Mgt. • Formal Reviews • Problem Reporting/ Corrective Action • Surveillance • Independent Design Reviews • Verification Plans/ Specs (GEVS-SE) • Test Matrix/ Verification Reports • Component/ Subsystem Reviews • Verification Reports

5. Workmanship/Design/ESD Requirements EEE Parts Materials & Processes Contamination Control GIDEP Alerts & Problem Advisories Requirements Applicable to all Mission Phases 300-PG-7120.2.2 (MAG) RLEP MAR 430-RQMT-000006 LRO PAIP 431-PLAN-000131 • NASA-STD-8739 Series • PWB Design per IPC 2221-2223, D-275 • PWB Mfg. Per ICP A600-6018 W/ GSFC Supplement • PWB Coupons • Training / Certification • ESD – ANSI/ESD S20-20 • Level 2 parts per EEE-INST-002 • Parts Control Board • Derating • Radiation Effects– TID, ELDR, SEE • Value Added Tests (PIND, etc.) • Alerts • Test Data & EIDP • Photos • Compliant Materials & MSFC-STD-3029 • Outgassing Limits (TML/CVCM) • Shelf Life Controls • Materials & Process Lists for LRO MAE Review & Approval • Fastener Integrity (541-PG-8072.1.2) • Raw Material Certs. • Contamination Verification Process • Contamination Control Plan • Outgassing • T/V Bakeouts of all Hardware • Hardware Handling & Cleanroom Standards. • Respond to GIDEP and NASA Advisories (GPG 5340.3)

6. RLEP/LRO MAR – PAIP Relationship • The RLEP Mission Assurance Requirements (MAR) document was written to define the overall mission requirements for hardware, software and related critical ground support equipment. • The Spacecraft/Orbiter and Instrument teams responded with their Performance Assurance Implementation Plans (PAIP) which outline how the individual institutions and their contractors would meet the requirements called out as CDRLs in the MAR. • After the project has reviewed the initial PAIPs and commented back to the teams, revisions in the PAIPs may be required. • Those requirements which the developers cannot meet will be documented on a waiver request.

7. Problem Failure Reporting • Both the spacecraft/orbiter and instrument teams are required to document failures (at the first application of power at the start of end item acceptance testing or the first operation of a mechanism) or nonconformances with received product. • The LRO project office must be notified of problem/failures within 24 hours of occurrence. A failure review board may be required to disposition the actions related to the issue. • A closed loop nonconformance system is also required by the MAR. It shall include ensuring the corrective action is implemented to prevent recurrence. • A Material Review Board is required to disposition other than preliminary reviews. The teams QA lead shall be a member of the MRB. • The MRB chairperson shall notify the LRO project of all MRB actions and recommendations.

8. Surveillance and Audits • The LRO Project has a surveillance plan (430-PLAN-0003) which defines how the project will monitor hardware and software development activities from all the contractors. • Assurance reviews and audits provide an insight into how the contractors are functioning. • Participation by SMA in boards such as CCB, PCB, MRB, FRB and others provides insight into various phases of the design and workmanship. • The LRO SMA team will use two methods of product verification. • Direct examination: inspection of hardware and associated documentation • Indirect examination: similar hardware fabricated by the same personnel and equipment, lot acceptance samples and material examinations that may take place at GSFC.

9. Mission Assurance Summary • Mission Assurance Requirements are well defined and comprehensive. • These are traditional requirements for GSFC Missions and they are understood. • Systems with experienced personnel are in place and operating. The Lunar Reconnaissance Orbiter Mission Assurance team is ready to support PDR